General
- Target Software_v2.8.zip
- Size 566KB
- Sample260622-ryw8dsds5s
- SHA256 58d75d493bdba707bff90859b3808827d09ee5146469bf840663977ae9a6d56f
Score
8/10
Malware Config
Targets
-
- Target Application.cmd
- Size 26B
- SHA256 cd4d2b6dc9c764c3f2b2b003bce035053a8ce81420c7ea886c76611219cae4ae
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
- Target package.txt
- Size 291KB
- SHA256 54bbd79ed1ee26d3e7aa079963ba26c36aa683c01cc8b05b6d255da8634df006
Score3/10 -
- Target unit.exe
- Size 852KB
- SHA256 d1557bc3f5d8542f9b7f8e80b02283397d2e437386a6662251c4fc7342167cda
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.